home

3051aeb46af8fa1b8b10e606bf884f8b_227888.npb

The file 3051aeb46af8fa1b8b10e606bf884f8b_227888.npb has been detected as malware by 38 anti-virus scanners.
MD5:
3051aeb46af8fa1b8b10e606bf884f8b

SHA-1:
159352b820159e02cad6c132e2167e8e7f4826f9

SHA-256:
ffe819e7134fd9eb5da4734c8bd54c47b61c5ba5ced0d7f19e0de42bb82cd782

Scanner detections:
38 / 68

Status:
Malware

Analysis date:
4/18/2024 9:58:10 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Win32.Worm.Brontok.BI
6434017

Agnitum Outpost
Packed/PECompact
7.1.1

AhnLab V3 Security
HEUR/Fakon.mwf
2015.01.25

Avira AntiVirus
Worm/VB.CZ.14.A
7.11.30.172

avast!
Win32:Sality
150102-1

AVG
Worm/Generic3.EHY
2014.0.4253

Bitdefender
Win32.Worm.Brontok.BI
1.0.20.125

Bkav FE
W32.HfsAutoA
1.3.0.6379

Clam AntiVirus
Worm.VB-89
0.98/19974

Comodo Security
Worm.Win32.VB.CZ_14_A0
20835

Dr.Web
Trojan.MulDrop.59624
9.0.1.05190

Emsisoft Anti-Malware
Win32.Worm.Brontok.BI
9.0.0.4799

ESET NOD32
Win32/NoonLight.B worm
7.0.302.0

F-Prot
W32/Worm.AJ
4.6.5.141

F-Secure
Win32.Worm.Brontok.BI
5.13.68

G Data
Win32.Worm.Brontok.BI
15.1.24

IKARUS anti.virus
Trojan.Win32.Agent2
t3scan.1.8.6.0

K7 AntiVirus
EmailWorm
13.192.14746

Kaspersky
HEUR:Trojan.Win32.Generic
14.0.0.2590

Malwarebytes
Worm.AutoRun
v2015.01.25.01

McAfee
Virus.W32/MoonLight.worm
16.8.708.2

Microsoft Security Essentials
Threat.Undefined
1.191.3191.0

MicroWorld eScan
Win32.Worm.Brontok.BI
16.0.0.75

NANO AntiVirus
Trojan.Win32.VB.crsvto
0.30.0.64812

Norman
Win32.Worm.Brontok.BI
03.12.2014 13:20:04

nProtect
Win32.Worm.Brontok.BI
15.01.23.01

Qihoo 360 Security
Malware.QVM19.Gen
1.0.0.1015

Quick Heal
Worm.Lightmoon.H2
1.15.14.00

Rising Antivirus
PE:Malware.FakeFolder@CV!1.6AA9
23.00.65.15123

Sophos
Virus 'W32/Lightmoon-A'
5.09

SUPERAntiSpyware
Trojan.Agent/Gen-Pakon
10095

Total Defense
Win32/Brontok.GE
37.0.11402

Trend Micro House Call
WORM_OTORUN.SM8
7.2.25

Trend Micro
WORM_OTORUN.SM8
10.465.25

Vba32 AntiVirus
Worm.VB
3.12.26.3

VIPRE Antivirus
Threat.180517
36694

ViRobot
Worm.Win32.VB.32768[h]
2014.3.20.0

Zillya! Antivirus
Worm.VB.Win32.2
2.0.0.2044

File size:
222.5 KB (227,888 bytes)

Common path:
C:\ProgramData\application data\net protector\npbkpn\3051aeb46af8fa1b8b10e606bf884f8b_227888.npb

File PE Metadata
Compilation timestamp:
10/29/2007 4:10:23 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:PkAbfAvljKJvljKJvljKJvl9yTXkfX2qrh:ZEAAAAk

Entry address:
0x1189

Entry point:
B1, 07, 5E, B8, 5C, B1, 41, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 82, 3C, 25, 81, A6, 49, 2A, 33, 9D, D6, EC, B8, 06, 94, 03, 10, 9A, BB, 92, B3, 43, 38, 52, 66, 4F, 0A, 0D, 85, A5, D1, A5, 52, 6D, 94, 93, 1C, 51, 4A, 9D, 63, D5, C0, 41, 3A, F7, D6, 69, 7F, E0, 8A, 68, 57, 35, F7, 31, 22, C0, BB, 17, D8, 98, 6A, 63, C8, C6, 57, 85, B4, C1, 48, AF, 7A, AC, B9, 8C, 3E, 36, E8, DC, 4B, C1, 8F, 3B, E0, 10, A8, F5, 26, 7D, 05...
 
[+]

Entropy:
5.2558

Code size:
72 KB (73,728 bytes)

Remove 3051aeb46af8fa1b8b10e606bf884f8b_227888.npb - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.